[ 
https://issues.apache.org/jira/browse/SSHD-1014?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17130481#comment-17130481
 ] 

Rohini Jori commented on SSHD-1014:
-----------------------------------

[^POC LOGS -password-change  version 2.3.1.txt]

[^sshd.zip]

 

Hi [~lgoldstein]

I have created one POC for password change. I am using jar with version 2.3.1.  
 

But I am getting this error in logs: *Failed (UnsupportedOperationException) to 
authenticate using factory method=password: Password change not supported.*

So how can we support the password change? Do we need to do any server 
configuration for that? ** 

 

> Password Change Request - 'handleClientPasswordChangeRequest' not getting 
> invoked with the sshd-core-2.3.1 jar version used.
> ----------------------------------------------------------------------------------------------------------------------------
>
>                 Key: SSHD-1014
>                 URL: https://issues.apache.org/jira/browse/SSHD-1014
>             Project: MINA SSHD
>          Issue Type: New Feature
>            Reporter: Rohini Jori
>            Priority: Major
>         Attachments: Authenticate method code - Throws the 
> PasswordChangeRequiredException.txt, Normal-Login-LOGS.txt, POC LOGS 
> -password-change  version 2.3.1.txt, Password-change-Not Working- version 
> -2.3.1 - WinScp LOGS.txt, Password-change-Not Working- version -2.3.1.txt, 
> SERVER LOGS.txt, SSHDPasswordAuthenticator.java, SftpClientSSHD.java, 
> SftpServerDemo.java, SshdApplication.java, error1.png, 
> handleClientPasswordChange  CODE.txt, password-change-Request- LOGS.txt, 
> sshd.zip
>
>
> *Question:*
> Wanted to know  why the 'handleClientPasswordChangeRequest' method is working 
> with 'sshd-core-2.3.0' jar and not with the 'sshd-core-2.3.1' jar?
> *Description*:
>  In case of password change request, the authenticate method of 
> PasswordAuthenticator class throws the 'PasswordChangeRequiredException' 
>  which will internally calls 'handleClientPasswordChangeRequest' method where 
> the password is changed for the user.
> Method calls sequence-
>  1. PasswordAuthenticator.authenticate()
>  2. authenticate() method throws PasswordChangeRequiredException.
>  3. UserAuthPassword.checkPassword()
>  4. UserAuthPassword.handlePasswordChangeRequest()
>  5. shows the prompt to get the new password from user. Then click ok.
>  6. UserAuthPassword.handleClientPasswordChangeRequest() - change old 
> password.
>   
>   
>  *So the problem* is that  when we used the sshd-core-2.3.1 jar, The 
> 'handleClientPasswordChangeRequest' is not getting called after we receive 
> the password-change request. 
>   
>  But  When we used the 'sshd-core-2.3.0' jar  the 
> 'handleClientPasswordChangeRequest' method is getting called and also the 
> password changed successfully.
>  But after that we got the problem in authentication. we get the  'Server 
> refused to start a shell/command' authentication failed error.
> I have attached the logs & image for reference.
>  
> So Is this dependent on 'sshd-core' jar? Could you please help?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org
For additional commands, e-mail: dev-h...@mina.apache.org

Reply via email to